Updated on 14 October 2026.
Who is responsible (controller)
The party responsible for processing your personal data is Ponta Negra Paradise House, represented by the host, Edu.
Channel for privacy questions and to exercise your rights: WhatsApp +55 84 99119-3173.
What data we collect and how
Messages and forms: the site builds a message with what you type (name, dates, number of guests, phone, email, message) and opens your WhatsApp. The site does not store this data: it only reaches us if you send the message.
Booking: when a booking is confirmed, we process the data needed for the rental agreement (identification, ID document, contact details and guest list, which may include children and teenagers).
During the stay: security cameras in outdoor areas of the property and in two restricted indoor areas (a storeroom and a utility room, which guests do not use), and the electronic lock at the entrance. Fingerprint access is optional and only happens at the guest’s own request.
Browsing: the provider that delivers the site (Cloudflare) records technical data such as IP address and browser type.
What we use the data for, on what basis and for how long
Each purpose has its legal basis (LGPD, arts. 7 and 11) and its retention period.
Messages sent on WhatsApp (name, phone, email, dates, message)
- Purpose
- Reply, send availability and a quote
- Legal basis
- Pre-contractual steps at the data subject’s request (art. 7, V)
- Retention
- Up to 12 months after the last contact, if there is no booking
Booking and agreement data (identification, ID document, contact, guests)
- Purpose
- Draft and perform the rental agreement, charge and account for payments
- Legal basis
- Contract performance (art. 7, V), legal obligation (art. 7, II) and regular exercise of rights (art. 7, VI)
- Retention
- During the stay and up to 5 years afterwards, for legal obligations and any defence in disputes
Security camera images and lock records
- Purpose
- Safety of people and the property
- Legal basis
- Legitimate interest (art. 7, IX)
- Retention
- Up to 15 days
Fingerprint, only if the guest asks
- Purpose
- Access to the property during the stay
- Legal basis
- Specific consent (art. 11, I)
- Retention
- Deleted or deactivated at the end of the stay
Technical browsing data (IP, browser)
- Purpose
- Security and operation of the site
- Legal basis
- Legitimate interest (art. 7, IX)
- Retention
- As per the provider’s temporary logs
Data exchanged with the Google map, only if you click
- Purpose
- Show the area map
- Legal basis
- Consent, by clicking (art. 7, I)
- Retention
- As per Google’s policy
Transfers outside Brazil
Some of these services use servers in other countries. When that happens, we rely on providers that state they apply protection measures compatible with the LGPD (art. 33).
Your rights and how to exercise them
At any time and free of charge, you may ask for: confirmation that we process your data; access; correction; anonymisation, blocking or deletion of unnecessary data or data processed in breach of the law; portability; information about who we share data with; information about the option not to consent and its consequences; and withdrawal of consent (LGPD, art. 18).
How to ask: on WhatsApp +55 84 99119-3173. We reply within 15 days. We may ask you to confirm your identity to protect your data.
If you believe your rights were not respected, you may complain to Brazil’s National Data Protection Authority (ANPD): www.gov.br/anpd.
Security
We adopt technical and administrative measures to protect data, such as a secure connection (HTTPS), restricted access to messages and documents, and keeping contract documents only for as long as needed. No system is completely secure: if an incident could cause relevant risk or harm, we will notify the people affected and the ANPD, as the law requires.
Children and teenagers
Data about children and teenagers (for example, names on the guest list) is only processed when provided by parents or guardians, in the minor’s best interest and for the booking and the safety of the stay.
Changes to this policy
We may update this policy. The date of the last update is shown at the top of the page, and important changes will be announced here.
